Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
File:                     iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json)
Hash identifier:          N9L3pRPvZTlrkQD2Qtakn1hZb4DQ0Z4HQA5zBnBO9lE=
Subject key identifier:   A2:BE:FE:F3:CE:35:51:CB:C8:F6:5E:97:55:FD:78:DE:D6:74:7A:3B
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       019F90FF6AD1895D37247AEE071FAE309994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
Manifest number:          19F6
Signing time:             Thu 23 Jul 2026 22:01:25 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:25 +0000
Files and hashes:         1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=)
                          2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=)
                          3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=)
                          4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=)
                          5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=)
                          6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=)
                          7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=)
                          8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=)
                          9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=)
                          10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=)
                          11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=)
                          12: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=)
                          13: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=)
                          14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: z9QdQgSRP9wlSNbEyH5cNQP7bRpmsRAAYKdA65ggFvg=)
                          15: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=)
                          16: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=)
                          17: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=)
                          18: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=)
                          19: uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa (hash: sElnQC2IhBjiqBFU5wF4Odl3TglqL3IWyDtwzfQrYCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:6a:d1:89:5d:37:24:7a:ee:07:1f:ae:30:99:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Jul 23 22:01:25 2026 GMT
            Not After : Jul 24 22:01:25 2026 GMT
        Subject: CN=a2befef3ce3551cbc8f65e9755fd78ded6747a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:54:cd:18:f3:7d:1c:8e:e5:94:7a:55:e5:
                    30:bd:2b:93:bb:f2:9f:78:03:4a:09:9c:15:db:1c:
                    85:8c:75:61:94:62:f4:d0:2c:aa:d5:04:22:08:d7:
                    42:54:72:a2:0b:b1:a3:ec:f0:ee:80:3e:89:99:40:
                    28:a1:9f:7b:99:cc:db:bf:dc:f5:50:a9:82:01:9d:
                    0c:3a:cd:04:ae:24:f4:ee:cd:97:3f:10:0d:16:0a:
                    e1:60:bf:8f:65:e1:c3:97:b6:90:38:81:6c:0e:b5:
                    33:f7:a8:1d:b4:8d:4f:78:88:09:fd:10:83:6f:10:
                    9d:36:21:36:99:82:9f:d3:bf:6b:e5:ca:d0:03:f3:
                    4a:2a:b8:11:9a:e0:54:4a:a7:e3:c9:16:22:4d:36:
                    a5:8d:e9:53:11:43:ab:df:ac:4a:6e:43:58:fc:0a:
                    a9:78:c3:89:eb:3a:8d:18:f5:54:43:ab:0e:1d:e9:
                    58:05:ea:61:8d:d3:ca:a2:d8:14:83:f5:7d:f9:83:
                    4f:3d:61:e5:97:06:d4:0b:2a:29:f7:92:20:c1:53:
                    27:7f:95:81:7d:03:ac:93:a4:83:e5:3e:39:36:78:
                    58:92:cb:d1:b4:16:c7:84:b8:73:f3:58:3a:e6:ec:
                    12:89:eb:cb:79:37:b9:2e:2b:e3:7f:12:86:20:67:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BE:FE:F3:CE:35:51:CB:C8:F6:5E:97:55:FD:78:DE:D6:74:7A:3B
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:41:d6:36:e3:ee:a0:ea:54:7b:31:11:f0:17:a5:8f:64:
         de:3d:fc:ea:07:43:3c:31:57:e7:fc:58:e4:ef:9e:91:77:a9:
         87:6e:86:30:8e:51:a4:d0:b6:d5:8e:6d:f4:37:b1:31:a3:49:
         87:91:b1:7a:29:16:7b:4f:1e:44:e4:01:76:cf:f2:41:0f:8e:
         64:8c:30:f2:9b:45:96:b4:d9:73:84:d6:76:45:09:b8:eb:aa:
         75:7c:44:fd:18:09:16:f5:09:ed:95:dc:b5:99:7d:f0:bd:b6:
         4a:8d:a1:fb:09:f1:6c:9b:27:48:45:08:02:64:a6:3c:2d:1d:
         84:db:d7:78:6e:de:5b:12:8b:88:b6:6e:3e:bb:fd:95:d9:a0:
         27:9e:79:bc:90:52:73:27:a6:17:4d:d5:e7:c8:9b:02:64:c9:
         f1:21:5d:e2:46:b3:c1:46:a5:7a:5d:15:b0:65:34:82:50:2f:
         0a:0f:fe:66:72:6c:88:75:47:bc:7e:9b:9b:33:c4:50:0a:83:
         28:47:15:ba:39:40:9c:cb:f2:7b:1c:c5:f8:84:4d:87:07:01:
         be:88:c4:37:15:62:ce:d6:b2:08:7d:cc:a0:3f:e3:cf:ab:e6:
         fd:15:cc:71:ea:67:39:14:dc:9c:dc:47:35:ec:96:37:4f:32:
         c2:0d:6e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/2rRiV03JHruBx+uMJmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjYwNzIzMjIwMTI1WhcNMjYwNzI0MjIwMTI1WjAzMTEwLwYDVQQD
EyhhMmJlZmVmM2NlMzU1MWNiYzhmNjVlOTc1NWZkNzhkZWQ2NzQ3YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/lUzRjzfRyO5ZR6VeUwvSuTu/Kf
eANKCZwV2xyFjHVhlGL00Cyq1QQiCNdCVHKiC7Gj7PDugD6JmUAooZ97mczbv9z1
UKmCAZ0MOs0EriT07s2XPxANFgrhYL+PZeHDl7aQOIFsDrUz96gdtI1PeIgJ/RCD
bxCdNiE2mYKf079r5crQA/NKKrgRmuBUSqfjyRYiTTaljelTEUOr36xKbkNY/Aqp
eMOJ6zqNGPVUQ6sOHelYBephjdPKotgUg/V9+YNPPWHllwbUCyop95IgwVMnf5WB
fQOsk6SD5T45NnhYksvRtBbHhLhz81g65uwSievLeTe5LivjfxKGIGfq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK+/vPONVHLyPZel1X9eN7WdHo7MB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjpB1jbj
7qDqVHsxEfAXpY9k3j386gdDPDFX5/xY5O+ekXeph26GMI5RpNC21Y5t9DexMaNJ
h5GxeikWe08eROQBds/yQQ+OZIww8ptFlrTZc4TWdkUJuOuqdXxE/RgJFvUJ7ZXc
tZl98L22So2h+wnxbJsnSEUIAmSmPC0dhNvXeG7eWxKLiLZuPrv9ldmgJ555vJBS
cyemF03V58ibAmTJ8SFd4kazwUalel0VsGU0glAvCg/+ZnJsiHVHvH6bmzPEUAqD
KEcVujlAnMvyexzF+IRNhwcBvojENxViztayCH3MoD/jz6vm/RXMcepnORTcnNxH
NeyWN08ywg1uEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:39 2026 by rpki-client